daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2451 from daffainfo/patch-167 

Update openssh-username-enumeration
patch-1
Prince Chaddha 2021-08-21 18:54:01 +05:30 committed by GitHub
parent 2fe9893a3f 9cc8cd3353
commit e22939499b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 19 additions and 145 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
cves/2018/CVE-2018-15473.yaml Normal file
View File

@ -0,0 +1,19 @@
id: CVE-2018-15473
info:
name: OpenSSH Username Enumeration
author: r3dg33k,daffainfo
severity: low
description: OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
reference: https://nvd.nist.gov/vuln/detail/CVE-2018-15473
tags: network,openssh,cve,cve2018
network:
- host:
- "{{Hostname}}"
- "{{Hostname}}:22"
matchers:
- type: regex
regex:
- 'SSH-2.0-OpenSSH_[1-7].*'

145
network/openssh-username-enumeration.yaml
View File

@ -1,145 +0,0 @@
id: openssh-username-enumeration
info:
name: OpenSSH 2.3 < 7.7 Detection
author: r3dg33k
severity: medium
tags: network,openssh
description: OpenSSH 2.3 < 7.7 is vulnerable to username enumeration
reference: https://nvd.nist.gov/vuln/detail/CVE-2018-15473
network:
- host:
- "{{Hostname}}"
- "{{Hostname}}:22"
matchers:
- type: word
words:
- "SSH-2.0-OpenSSH_7.6"
- "SSH-2.0-OpenSSH_7.6p1"
- "SSH-2.0-OpenSSH_7.5"
- "SSH-2.0-OpenSSH_7.5p1"
- "SSH-2.0-OpenSSH_7.4"
- "SSH-2.0-OpenSSH_7.4p1"
- "SSH-2.0-OpenSSH_7.3"
- "SSH-2.0-OpenSSH_7.3p1"
- "SSH-2.0-OpenSSH_7.2p2"
- "SSH-2.0-OpenSSH_7.2"
- "SSH-2.0-OpenSSH_7.2p1"
- "SSH-2.0-OpenSSH_7.1p2"
- "SSH-2.0-OpenSSH_7.1"
- "SSH-2.0-OpenSSH_7.1p1"
- "SSH-2.0-OpenSSH_7.0"
- "SSH-2.0-OpenSSH_7.0p1"
- "SSH-2.0-OpenSSH_6.9"
- "SSH-2.0-OpenSSH_6.9p1"
- "SSH-2.0-OpenSSH_6.8"
- "SSH-2.0-OpenSSH_6.8p1"
- "SSH-2.0-OpenSSH_6.7"
- "SSH-2.0-OpenSSH_6.7p1"
- "SSH-2.0-OpenSSH_6.6"
- "SSH-2.0-OpenSSH_6.6p1"
- "SSH-2.0-OpenSSH_6.5"
- "SSH-2.0-OpenSSH_6.5p1"
- "SSH-2.0-OpenSSH_6.4"
- "SSH-2.0-OpenSSH_6.4p1"
- "SSH-2.0-OpenSSH_6.3"
- "SSH-2.0-OpenSSH_6.3p1"
- "SSH-2.0-OpenSSH_6.2p2"
- "SSH-2.0-OpenSSH_6.2"
- "SSH-2.0-OpenSSH_6.2p1"
- "SSH-2.0-OpenSSH_6.1"
- "SSH-2.0-OpenSSH_6.1p1"
- "SSH-2.0-OpenSSH_6.0"
- "SSH-2.0-OpenSSH_6.0p1"
- "SSH-2.0-OpenSSH_5.9"
- "SSH-2.0-OpenSSH_5.9p1"
- "SSH-2.0-OpenSSH_5.8p2"
- "SSH-2.0-OpenSSH_5.8"
- "SSH-2.0-OpenSSH_5.8p1"
- "SSH-2.0-OpenSSH_5.7"
- "SSH-2.0-OpenSSH_5.7p1"
- "SSH-2.0-OpenSSH_5.6"
- "SSH-2.0-OpenSSH_5.6p1"
- "SSH-2.0-OpenSSH_5.5"
- "SSH-2.0-OpenSSH_5.5p1"
- "SSH-2.0-OpenSSH_5.4"
- "SSH-2.0-OpenSSH_5.4p1"
- "SSH-2.0-OpenSSH_5.3"
- "SSH-2.0-OpenSSH_5.3p1"
- "SSH-2.0-OpenSSH_5.2"
- "SSH-2.0-OpenSSH_5.2p1"
- "SSH-2.0-OpenSSH_5.1"
- "SSH-2.0-OpenSSH_5.1p1"
- "SSH-2.0-OpenSSH_5.0"
- "SSH-2.0-OpenSSH_5.0p1"
- "SSH-2.0-OpenSSH_4.9"
- "SSH-2.0-OpenSSH_4.9p1"
- "SSH-2.0-OpenSSH_4.8"
- "SSH-2.0-OpenSSH_4.8p1"
- "SSH-2.0-OpenSSH_4.6"
- "SSH-2.0-OpenSSH_4.6p1"
- "SSH-2.0-OpenSSH_4.7"
- "SSH-2.0-OpenSSH_4.7p1"
- "SSH-2.0-OpenSSH_4.5"
- "SSH-2.0-OpenSSH_4.5p1"
- "SSH-2.0-OpenSSH_4.4"
- "SSH-2.0-OpenSSH_4.4p1"
- "SSH-2.0-OpenSSH_4.3p2"
- "SSH-2.0-OpenSSH_4.3"
- "SSH-2.0-OpenSSH_4.3p1"
- "SSH-2.0-OpenSSH_4.2"
- "SSH-2.0-OpenSSH_4.2p1"
- "SSH-2.0-OpenSSH_4.1"
- "SSH-2.0-OpenSSH_4.1p1"
- "SSH-2.0-OpenSSH_4.0"
- "SSH-2.0-OpenSSH_4.0p1"
- "SSH-2.0-OpenSSH_3.9"
- "SSH-2.0-OpenSSH_3.9p1"
- "SSH-2.0-OpenSSH_3.8.1p1"
- "SSH-2.0-OpenSSH_3.8"
- "SSH-2.0-OpenSSH_3.8p1"
- "SSH-2.0-OpenSSH_3.7.1p2"
- "SSH-2.0-OpenSSH_3.7.1"
- "SSH-2.0-OpenSSH_3.7.1p1"
- "SSH-2.0-OpenSSH_3.7"
- "SSH-2.0-OpenSSH_3.7p1"
- "SSH-2.0-OpenSSH_3.6.1p2"
- "SSH-2.0-OpenSSH_3.6.1"
- "SSH-2.0-OpenSSH_3.6.1p1"
- "SSH-2.0-OpenSSH_3.6"
- "SSH-2.0-OpenSSH_3.6p1"
- "SSH-2.0-OpenSSH_3.5"
- "SSH-2.0-OpenSSH_3.5p1"
- "SSH-2.0-OpenSSH_3.4"
- "SSH-2.0-OpenSSH_3.4p1"
- "SSH-2.0-OpenSSH_3.3"
- "SSH-2.0-OpenSSH_3.3p1"
- "SSH-2.0-OpenSSH_3.2.3"
- "SSH-2.0-OpenSSH_3.2.3p1"
- "SSH-2.0-OpenSSH_3.2.2"
- "SSH-2.0-OpenSSH_3.2.2p1"
- "SSH-2.0-OpenSSH_3.1"
- "SSH-2.0-OpenSSH_3.1p1"
- "SSH-2.0-OpenSSH_3.0.2"
- "SSH-2.0-OpenSSH_3.0.2p1"
- "SSH-2.0-OpenSSH_3.0p1"
- "SSH-2.0-OpenSSH_3.0.1"
- "SSH-2.0-OpenSSH_3.0.1p1"
- "SSH-2.0-OpenSSH_3.0"
- "SSH-2.0-OpenSSH_3.0p1"
- "SSH-2.0-OpenSSH_2.9p2"
- "SSH-2.0-OpenSSH_2.9.9"
- "SSH-2.0-OpenSSH_2.9.9p1"
- "SSH-2.0-OpenSSH_2.9"
- "SSH-2.0-OpenSSH_2.9p1"
- "SSH-2.0-OpenSSH_2.5.2p2"
- "SSH-2.0-OpenSSH_2.5.1p2"
- "SSH-2.0-OpenSSH_2.5.1p1"
- "SSH-2.0-OpenSSH_2.3.0p1"
- "SSH-2.0-OpenSSH_2.5.2p2"
- "SSH-2.0-OpenSSH_2.5.1p2"
- "SSH-2.0-OpenSSH_2.5.1p1"
- "SSH-2.0-OpenSSH_2.3.0p1"
- "SSH-2.0-OpenSSH_2.3"